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REMARKS 

Claims 2, 3, 7, 25, 26 and 30 have been cancelled without prejudice or disclaimer. 
Claims 1,4, 8-9, 12, 14-15, 18, 20, 24, 27, 35, 38 and 47 have been amended. Support for 
claim amendments can be found at pages 10, 20 and 47 of the specification, for example. 

Independent Claims 1 , 24, and 47 have been amended to include the features recited in 
cancelled claims 2, 3, 7, 25, 26 and 30, respectively. 

Claims 1, 4-6, 8-24, 27-29 and 31-47 are pending and under consideration. 
Reconsideration is respectfully requested. 

I. OBJECTION TO CLAIM 47: 

Claim 47 has been amended to recite "an abnormality". Therefore, it is respectfully 
submitted that the objection is overcome. 

II. REJECTION OF CLAIMS 14-16, 18, 37-39 AND 41 UNDER 35 U.S.C. 112: 

Claims 14-16, 18, 37-39 and 41 have been amended to overcome the 112 rejections. 
Therefore, it is respectfully submitted that the rejection is overcome. 

III. REJECTION OF CLAIMS 1-47 UNDER 35 U.S.C. 102(b) AS BEING ANTICIPATED BY 
HUFF ET AL. (WO 99/57625; HEREINAFTER " HUFF "): 

Claim 1 has been amended to recite "a selection unit which selects the countermeasure 
from various angles based upon the database and mounting information, operation information, 
and/or security information to be performed; an information collection unit which collects 
information related to a kind, a content, an order, and a time interval of two or more 
communications in a proceeding process of an attack event or a leakage event; and a reflection 
unit which reflects the information collected and regulated by the information collection unit upon 
the database , to thereby predict a possible attack event or a leakage event and to avoid the 
predicted attack event or leakage event beforehand, wherein the information notified by the 
communication request monitor unit and/or countermeasure selected by the management unit 
are weighted". Huff fails to recite these features. 
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Various embodiments of the present invention disclose a detection of an omen of an 
attack on a website and implementing a countermeasure before the actual attack is started to 
thereby minimize damage (see page 3 of the Specification). 

Instead, Huff discloses a method and apparatus for which includes a security computer 
system capable of deploying and monitoring software agents on one or more nodes of a network 
of computers (see Abstract). Further, upon an intrusion detection mission sending information to 
the security computer system indicating an actual or suspected misuse or intrusion, the security 
computer system can automatically take countermeasures against the suspected or actual 
intrusion or misuse. Specifically, Huff discloses that the intrusion detection mission is capable of 
determining and reporting an instance of intrusion or misuse but is not capable of taking any 
significant offensive or countermeasure actions to prevent or halt the intrusion or misuse (see 
page 20, lines 1 0-14). That is, a protection operation is carried out only after the detection of an 
event (i.e., an attack). 

Various embodiments of the present invention further disclose that a target point of 
protection is not limited to a host computer, but may include any devices on the communication 
device, for example, and the types of data are not limited to logs on a host computer. However, 
in Huff the protection is carried out only on a protection-target host computer, for example, by 
use of obtained logs and the like. 

Although the above comments are specifically directed to claim 1 , it is respectfully 
submitted that the comments would be helpful in understanding differences of various other 
rejected claims over the cited reference. Therefore, it is respectfully submitted that the rejection 
is overcome. 

IV. CONCLUSION: 

In view of the foregoing amendments and remarks, it is respectfully submitted that each 
of the claims patentably distinguishes over the prior art, and therefore, defines allowable subject 
matter. A prompt and favorable reconsideration of the rejection along with an indication of 
allowability of all pending claims are therefore respectfully requested. 
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If there are any additional fees associated with filing of this Amendment, please charge 
the same to our Deposit Account No. 19-3935. 



Respectfully submitted, 



Date: 




1201 New York Avenue, NW, Suite 700 
Washington, D.C. 20005 
Telephone: (202) 434-1 500 
Facsimile: (202)434-1501 
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